Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030303a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363030303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: EXWP2Quosw03EHreEfNi/cOZTe+OyQquhBzHq+7J8m8=
Subject key identifier: FF:FD:D7:0C:B1:6B:1D:9B:10:45:05:0A:F1:2E:D8:39:0C:1A:84:43
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3494789E44E8DF7A467E082D35EA71446DB2C0CA
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030303a3a2f34382d3438203d3e203136393039.roa
Signing time: Sat 21 Dec 2024 20:32:42 +0000
ROA not before: Sat 21 Dec 2024 20:27:42 +0000
ROA not after: Sat 20 Dec 2025 20:32:42 +0000
asID: 16909
IP address blocks: 2a14:7584:6000::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Dec 2024 20:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:94:78:9e:44:e8:df:7a:46:7e:08:2d:35:ea:71:44:6d:b2:c0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Dec 21 20:27:42 2024 GMT
Not After : Dec 20 20:32:42 2025 GMT
Subject: CN=FFFDD70CB16B1D9B1045050AF12ED8390C1A8443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0f:70:60:69:90:f8:4c:8b:9a:73:38:64:b6:
08:b9:db:7e:c2:df:33:43:c4:64:80:be:6f:04:70:
78:a7:25:74:b6:96:96:60:b3:4c:3d:16:e8:e1:fe:
ea:fb:05:6a:9c:be:0d:4f:d0:1d:bd:95:1d:a4:d6:
3e:81:3c:39:aa:c1:89:77:da:55:17:d7:e2:d0:be:
13:9f:65:43:c6:8a:7d:92:ee:84:24:bb:fc:7b:68:
b3:3d:f7:3d:68:4e:b6:3e:27:e2:a1:f4:2f:db:e7:
2b:6c:2f:cd:6d:ab:c9:9d:9f:b9:80:d7:81:67:74:
7d:f6:90:8a:17:67:bf:52:29:68:d4:5f:bc:4c:50:
0e:94:59:e9:81:76:e2:ca:9c:b4:81:10:30:d5:f6:
c6:67:c5:59:55:3c:c6:5f:c5:7c:c6:4a:56:ea:30:
21:e0:94:69:96:e8:fe:31:27:45:e2:a1:fd:a0:54:
81:cc:3f:c6:0d:08:8e:e4:a3:20:cb:58:ab:ea:45:
ed:97:2a:50:28:ec:1d:d3:a2:8c:1e:7c:2d:7b:76:
c6:52:b5:61:fc:5f:80:6a:c1:da:8a:15:1d:ca:b0:
8b:15:02:8c:8c:8b:4e:f5:1a:b8:16:f4:f0:e8:2a:
8c:c2:db:68:c0:2b:e7:9a:ab:ab:94:9a:ea:fc:c6:
33:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FD:D7:0C:B1:6B:1D:9B:10:45:05:0A:F1:2E:D8:39:0C:1A:84:43
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363030303a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6000::/48
Signature Algorithm: sha256WithRSAEncryption
57:f7:9c:cf:9c:09:ce:f3:22:4d:76:66:5d:01:41:42:88:12:
af:ae:4f:9f:fc:27:9d:1e:24:7a:db:ad:64:4e:ed:51:b5:27:
35:b1:32:70:93:e2:c2:dd:d9:c7:5f:2f:db:48:b5:2d:be:cb:
5e:71:0d:0e:e4:3c:16:c1:19:46:55:fe:49:ec:10:6c:1c:03:
5f:a8:6d:b4:06:fd:e8:5a:0c:2f:be:62:54:4a:80:fd:c7:54:
71:7e:1b:aa:ac:86:3a:9c:b7:9e:46:ce:27:54:5b:ef:3a:8c:
e6:d9:75:91:12:4f:15:d9:27:4b:88:58:af:20:7c:08:2e:55:
06:40:a5:bb:7d:fc:dc:ff:ff:49:8d:16:70:2a:e7:01:3a:ae:
5f:ac:9e:09:5f:28:20:59:89:ad:1d:6a:63:16:bc:68:f0:50:
10:da:5c:b3:7a:a4:0c:00:76:53:0c:28:d2:a8:fc:dc:39:1c:
13:15:0c:88:89:d4:3c:bd:1c:a0:f9:86:7a:d1:50:b3:9d:a5:
a3:48:15:e5:33:81:bd:ef:57:75:64:f2:34:ff:4a:3c:b9:46:
88:a7:8c:76:59:61:6d:af:84:c2:67:b6:61:d5:f3:ae:50:f7:
43:c5:f2:62:fa:c5:b8:0c:c5:6c:83:da:c0:41:4c:5a:61:fd:
b2:ff:c5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:45:58 2025 by rpki-client